Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [dmarc]

Domain-based Message Authentication, Reporting, and Conformance (DMARC) is a mechanism by which the owner of a domain uses specially formed DNS records to express domain-level policies and preferences for email validation, disposition, and reporting.

205 questions
3
votes
1 answer

DMARC 'sampled out' policy override effect in GMail server

Anyone know what actually a sampled out override reason mean in DMARC aggregated daily reports? I only get those from GMail and recently I've got some complains of undelivered messages from recipients or complaints that messages land in spam folder.…
squirrely
  • 209
  • 3
  • 11
3
votes
3 answers

Is it OK to set up a DMARC record with no rua and ruf tags?

All of my systems ask me to set up a DMARC record, and I want to. It seems to be universally recommended now. However, no one will be monitoring the email performance of the website, or would know how to interpret reports if they were generated. The…
hommealone
  • 31
  • 1
3
votes
1 answer

How is this email passing DMARC?

Today we received a spoofed email: it was sent to us "from us". (Assume we own foo.com -- real domain redacted.) This is disturbing, as it shows as "from foo.com", yet the sender is definitely not from "foo.com". The mailbox "hello@foo.com" is a…
Lawrence Wagerfield
  • 47
  • 8
3
votes
1 answer

When using a subdomain with DMARC configured to send RUA, is it necessary to add DMARC reports TXT record?

If I send an email from username@subdomain.example.com with rua=username@example.com in the DMARC record of subdomain.example.com, is it necessary to create a DMARC reports TXT record (e.g., subdomain.example.com._report._dmarc.example.com TXT…
Paul
  • 2,755
  • 6
  • 24
  • 35
3
votes
1 answer

Is it a DMARC failure if disposition=none & dkim=fail?

When I get one of these DMARC reports from Google is it because there is a problem? Or is it standard protocol. I am curious because I sent one test email and got this DMARC report to abuse@orcaaccounting.com. I just want to make sure everything…
Powerhouse6666
  • 143
  • 1
  • 7
2
votes
2 answers

Change DMARC Report frequency

My current record look like this: v=DMARC1; p=quarantine; rua=mailto:varun1@varunagw.com; ruf=mailto:Varun2@VarunAgw.com; pct=100; ri=604800 Still for some reason, I receive E-Mail from Google everyday instead of 7 days (604800 seconds) which is…
VarunAgw
  • 313
  • 3
  • 12
2
votes
3 answers

Forwarding to Gmail doesn't work for emails from Microsoft.com due to DMARC, but works for PayPal.com

I've noticed that I'm not getting certain emails in my Gmail and Yandex.Mail that are forwarded via UNIX systems (without SRS — not too sure if Sender Rewriting Scheme is still the best practice? Because with DMARC I think it'll also have to apply…
cnst
  • 12,948
  • 7
  • 51
  • 75
2
votes
1 answer

OpenDMARC with multiple MX: correct setup for trust between servers

There are many tutorials on how to setup OpenDMARC on your favorite flavor of Linux, but they all focus on single server configurations. My goal was to keep backup secondary MX servers, but enforce RejectFailures true for DMARC p=reject to be…
Esa Jokinen
  • 43,252
  • 2
  • 75
  • 122
2
votes
2 answers

Why am I only receiving DMARC aggregate reports from Google?

I have configured SPF, DKIM, and DMARC for a couple of domains that use G Suite as an email/office suite provider. Everything is looking great so far, except for some reason Google is the only provider that is sending us daily aggregate reports, and…
Jeff
  • 27
  • 5
2
votes
2 answers

SPF and DMARC - is spf policy used?

I understand how SPF is involved with DMARC alignment, but one thing I can't get clear: is the SPF policy (-all or ~all) used in DMARC? Or does DMARC merely use the IP ranges? The issue is, that as we all know, SPF breaks forwarding. DKIM is a lot…
Halfgaar
  • 7,921
  • 5
  • 42
  • 81
2
votes
2 answers

Shouldn't Gmail fail this message using DMARC due to bad alignment?

I had a test run against our mail server to see if the From header could be spoofed, which I expected to fail. We have SPF, DKIM, and DMARC all set up correctly, as far as I can tell. However, the following message was still delivered to…
Casey Wilkins
  • 153
  • 1
  • 6
2
votes
2 answers

Setup DKIM record without server signing

I'm using on one of my domains as hosting provider 101domain. I know that they don't have a good reputation, but since I have two sites to manage and one of them has multiple ccTLDS domains I wanted to give it a try to their services of hosting…
sebholz
  • 21
  • 2
2
votes
1 answer

Why is OpenDMARC using my (the recipients) configuration for incoming mail?

Recently I've had some incoming emails be rejected by my mail server for failing DMARC checks. Upon closer inspection I noticed that the logs mentioned that the rejection was because OpenDMARC was applying my policy instead of the sender's policy.…
Coding Cat
  • 21
  • 3
2
votes
1 answer

DMARC fails on forwarded mails without DKIM

I am running a mail server (postfix) on a VPS that is set up to forward all mail sent to an address in my private domain to a GMail address. SPF, SRS, DKIM, and DMARC are set up for my mail server and work fine for most mail, i.e. forwarded mails…
user3298489
  • 21
  • 3
2
votes
3 answers

DMARC record not found

I'm trying to set up DKIM, SPF and DMARC on my mail server. Although DKIM and SPF work fine (as reported by auth-results@verifier.port25.com) i can't seem to get DMARC to work. Both mxtoolbox.com and dmarcian.com report "No DMARC record found". My…
Wolfgang
  • 33
  • 1
  • 4
1 2 3
…
13 14